NETGEAR DGND3700v2 - Unauth Password Recovery Dump

Retrieves admin username/password from /setup.cgi?nextfile=passwordrecovered.htm on NETGEAR DGND3700v2 PSV-2021-0343. !/usr/bin/env python3 -- coding: utf-8 -- """Dump NETGEAR DGND3700v2 admin credentials via password recovery page.""" import re from kittysploit import from...

EUVD-2004-2499

Malware in sbrugna...

NETGEAR DGND4000 Elevation of Privilege Vulnerability

The NETGEAR DGND4000 is a wireless router , with modem capabilities. An elevation of privilege vulnerability exists in the ETGEAR DGND4000 that originates from elevating privileges to the /setup.cgi component via the nextfile parameter. No details of the vulnerability are provided at this time...

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

CVE-2023-50677: Improper Privilege Management

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

NETGEAR DGND4000 安全漏洞

The NETGEAR DGND4000 is a wireless router , with modem capabilities. An elevation of privilege vulnerability exists in the ETGEAR DGND4000 that originates from elevating privileges to the /setup.cgi component via the nextfile parameter. No details of the vulnerability are provided at this time...

CVE-2009-1556

img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the nextfile parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerabili...

CVE-2009-1557: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allow remote attackers to inject arbitrary web script or HTML via the nextfile parameter to 1 main.cgi, 2 img/main.cgi, or 3 adm/file.cgi; or 4 the thisfile...

CVE-2009-1556: Exposure of Sensitive Information to an Unauthorized Actor

img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the nextfile parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerabili...

CVE-2009-1558: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. encoded dot dot or an absolute pathname in the nextfile parameter...

CVE-2004-2508: Undefined Security Weakness

Cross-site scripting XSS vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to inject arbitrary web script or HTML via the nextfile parameter...

CVE-2004-2507: Undefined Security Weakness

Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to read arbitrary files via an absolute pathname in the nextfile parameter...